Kiwire Captive Portal Blind SQL Injection Vulnerability
Vulnerability
A blind SQL injection vulnerability has been identified in the Kiwire Captive Portal, specifically in the nas-id parameter. This vulnerability allows attackers to execute SQL commands that could compromise the associated database.
Impact
Exploitation of this vulnerability could lead to unauthorized database access and manipulation, allowing attackers to execute arbitrary SQL commands that could, for example, extract, modify, or delete database information.
Remediation
Users are advised to update to the latest version of Kiwire, where this vulnerability has been addressed.
Added: Oct 10, 2025, 11:26 AM
Updated: Oct 10, 2025, 11:26 AM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
5.0exploitability
7.4remediation
0.0relevance
0.7threat
0.0urgency
2.9incentive
5.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.